npm - @azure/msal-browser - Versions diffs - 4.24.0 → 4.25.0 - Mend

@azure/msal-browser 4.24.0 → 4.25.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (477) hide show

package/lib/custom-auth-path/msal-custom-auth.cjs CHANGED Viewed

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 'use strict';
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -276,7 +276,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -287,7 +287,7 @@ const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 const unexpectedError = "unexpected_error";
 const postRequestFailed$1 = "post_request_failed";
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -322,7 +322,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -372,7 +372,7 @@ const missingTenantIdError = "missing_tenant_id_error";
 const methodNotImplemented = "method_not_implemented";
 const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -446,7 +446,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -485,7 +485,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -676,12 +676,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
 const version$1 = "15.13.0";
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -690,7 +690,7 @@ const AzureCloudInstance = {
     // AzureCloudInstance is not specified.
     None: "none"};
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -719,7 +719,7 @@ const authorityMismatch = "authority_mismatch";
 const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
 const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -764,7 +764,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -861,7 +861,7 @@ class StringUtils {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1056,7 +1056,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1138,7 +1138,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1199,7 +1199,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1315,7 +1315,7 @@ function normalizeUrlForComparison(url) {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1479,7 +1479,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1618,7 +1618,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1626,7 +1626,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1671,7 +1671,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2779,7 +2779,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2803,7 +2803,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3070,7 +3070,7 @@ const PerformanceEvents = {
 const PerformanceEventStatus = {
     InProgress: 1};
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3149,7 +3149,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3249,7 +3249,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3259,7 +3259,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3299,7 +3299,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3349,7 +3349,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3729,7 +3729,7 @@ function addPostBodyParameters(parameters, bodyParameters) {
     });
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3744,7 +3744,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3756,7 +3756,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3766,7 +3766,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3776,7 +3776,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3872,7 +3872,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3978,7 +3978,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4043,7 +4043,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4305,7 +4305,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5144,7 +5144,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5175,7 +5175,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5194,7 +5194,7 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5215,7 +5215,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5302,7 +5302,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5333,7 +5333,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5481,7 +5481,7 @@ class BaseClient {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5503,7 +5503,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5724,7 +5724,7 @@ class AccountEntity {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5740,7 +5740,7 @@ const consentRequired = "consent_required";
 const loginRequired = "login_required";
 const badToken = "bad_token";
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5812,7 +5812,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5884,7 +5884,7 @@ class ProtocolUtils {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5966,7 +5966,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5993,7 +5993,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6324,7 +6324,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6342,7 +6342,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6577,7 +6577,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6786,7 +6786,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6884,7 +6884,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6899,7 +6899,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7123,7 +7123,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7386,7 +7386,7 @@ class ServerTelemetryManager {
     }
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7394,7 +7394,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7419,7 +7419,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
-/*! @azure/msal-common v15.13.0 2025-09-24 */
+/*! @azure/msal-common v15.13.0 2025-10-09 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7637,7 +7637,8 @@ const INVALID_POLL_STATUS = "invalid_poll_status";
 const PASSWORD_CHANGE_FAILED = "password_change_failed";
 const PASSWORD_RESET_TIMEOUT = "password_reset_timeout";
 const CLIENT_INFO_MISSING = "client_info_missing";
-const EXPIRED_TOKEN = "expired_token";
+const EXPIRED_TOKEN = "expired_token";
+const ACCESS_DENIED = "access_denied";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7652,7 +7653,8 @@ const PASSWORD_IS_INVALID = "password_is_invalid";
 const INVALID_OOB_VALUE = "invalid_oob_value";
 const ATTRIBUTE_VALIATION_FAILED = "attribute_validation_failed";
 const REGISTRATION_REQUIRED = "registration_required";
-const MFA_REQUIRED = "mfa_required";
+const MFA_REQUIRED = "mfa_required";
+const PROVIDER_BLOCKED_BY_REPUTATION = "provider_blocked_by_rep";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7756,9 +7758,9 @@ class AuthFlowErrorBase {
     }
     isVerificationContactBlockedError() {
         return (this.errorData instanceof CustomAuthApiError &&
-            this.errorData.error === INVALID_REQUEST &&
-            this.errorData.errorCodes?.includes(550024) === true &&
-            this.errorData.errorDescription?.includes("multi-factor authentication method is blocked") === true);
+            this.errorData.error === ACCESS_DENIED &&
+            this.errorData.subError ===
+                PROVIDER_BLOCKED_BY_REPUTATION);
     }
 }
 class AuthActionErrorBase extends AuthFlowErrorBase {
@@ -7852,7 +7854,7 @@ function ensureArgumentIsJSONString(argName, argValue, correlationId) {
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.24.0";
+const version = "4.25.0";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8050,6 +8052,67 @@ class SignInSubmitCodeError extends AuthActionErrorBase {
 class SignInResendCodeError extends AuthActionErrorBase {
 }
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Represents the state of a sign-in operation that has been failed.
+ */
+class SignInFailedState extends AuthFlowStateBase {
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class SignInResendCodeResult extends AuthFlowResultBase {
+    /**
+     * Creates a new instance of SignInResendCodeResult.
+     * @param state The state of the result.
+     */
+    constructor(state) {
+        super(state);
+    }
+    /**
+     * Creates a new instance of SignInResendCodeResult with an error.
+     * @param error The error that occurred.
+     * @returns {SignInResendCodeResult} A new instance of SignInResendCodeResult with the error set.
+     */
+    static createWithError(error) {
+        const result = new SignInResendCodeResult(new SignInFailedState());
+        result.error = new SignInResendCodeError(SignInResendCodeResult.createErrorData(error));
+        return result;
+    }
+    /**
+     * Checks if the result is in a failed state.
+     */
+    isFailed() {
+        return this.state instanceof SignInFailedState;
+    }
+    /**
+     * Checks if the result is in a code required state.
+     */
+    isCodeRequired() {
+        /*
+         * The instanceof operator couldn't be used here to check the state type since the circular dependency issue.
+         * So we are using the constructor name to check the state type.
+         */
+        return this.state.constructor?.name === "SignInCodeRequiredState";
+    }
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Represents the completed state of the sign-in operation.
+ * This state indicates that the sign-in process has finished successfully.
+ */
+class SignInCompletedState extends AuthFlowStateBase {
+}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8278,49 +8341,55 @@ class CustomAuthAccountData {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/**
- * Represents the state of a sign-in operation that has been failed.
- */
-class SignInFailedState extends AuthFlowStateBase {
+// Result type constants
+const JIT_VERIFICATION_REQUIRED_RESULT_TYPE = "JitVerificationRequiredResult";
+const JIT_COMPLETED_RESULT_TYPE = "JitCompletedResult";
+function createJitVerificationRequiredResult(input) {
+    return {
+        type: JIT_VERIFICATION_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createJitCompletedResult(input) {
+    return {
+        type: JIT_COMPLETED_RESULT_TYPE,
+        ...input,
+    };
 }
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-class SignInResendCodeResult extends AuthFlowResultBase {
-    /**
-     * Creates a new instance of SignInResendCodeResult.
-     * @param state The state of the result.
-     */
-    constructor(state) {
-        super(state);
-    }
+/**
+ * Error that occurred during authentication method challenge request.
+ */
+class AuthMethodRegistrationChallengeMethodError extends AuthActionErrorBase {
     /**
-     * Creates a new instance of SignInResendCodeResult with an error.
-     * @param error The error that occurred.
-     * @returns {SignInResendCodeResult} A new instance of SignInResendCodeResult with the error set.
+     * Checks if the input for auth method registration is incorrect.
+     * @returns true if the input is incorrect, false otherwise.
      */
-    static createWithError(error) {
-        const result = new SignInResendCodeResult(new SignInFailedState());
-        result.error = new SignInResendCodeError(SignInResendCodeResult.createErrorData(error));
-        return result;
+    isInvalidInput() {
+        return this.isInvalidInputError();
     }
     /**
-     * Checks if the result is in a failed state.
+     * Checks if the error is due to the verification contact (e.g., phone number or email) being blocked. Consider using a different email/phone number or a different authentication method.
+     * @returns true if the error is due to the verification contact being blocked, false otherwise.
      */
-    isFailed() {
-        return this.state instanceof SignInFailedState;
+    isVerificationContactBlocked() {
+        return this.isVerificationContactBlockedError();
     }
+}
+/**
+ * Error that occurred during authentication method challenge submission.
+ */
+class AuthMethodRegistrationSubmitChallengeError extends AuthActionErrorBase {
     /**
-     * Checks if the result is in a code required state.
+     * Checks if the submitted challenge code is incorrect.
+     * @returns true if the challenge code is incorrect, false otherwise.
      */
-    isCodeRequired() {
-        /*
-         * The instanceof operator couldn't be used here to check the state type since the circular dependency issue.
-         * So we are using the constructor name to check the state type.
-         */
-        return this.state.constructor?.name === "SignInCodeRequiredState";
+    isIncorrectChallenge() {
+        return this.isInvalidCodeError();
     }
 }
@@ -8328,42 +8397,53 @@ class SignInResendCodeResult extends AuthFlowResultBase {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/**
- * Represents the completed state of the sign-in operation.
- * This state indicates that the sign-in process has finished successfully.
- */
-class SignInCompletedState extends AuthFlowStateBase {
+class AuthMethodRegistrationFailedState extends AuthFlowStateBase {
 }
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/*
- * Result of a sign-in submit code operation.
+/**
+ * Result of challenging an authentication method for registration.
+ * Uses base state type to avoid circular dependencies.
  */
-class SignInSubmitCodeResult extends AuthFlowResultBase {
+class AuthMethodRegistrationChallengeMethodResult extends AuthFlowResultBase {
     /**
-     * Creates a new instance of SignInSubmitCodeResult with error data.
+     * Creates an AuthMethodRegistrationChallengeMethodResult with an error.
      * @param error The error that occurred.
-     * @returns {SignInSubmitCodeResult} A new instance of SignInSubmitCodeResult with the error set.
+     * @returns The AuthMethodRegistrationChallengeMethodResult with error.
      */
     static createWithError(error) {
-        const result = new SignInSubmitCodeResult(new SignInFailedState());
-        result.error = new SignInSubmitCodeError(SignInSubmitCodeResult.createErrorData(error));
+        const result = new AuthMethodRegistrationChallengeMethodResult(new AuthMethodRegistrationFailedState());
+        result.error = new AuthMethodRegistrationChallengeMethodError(AuthMethodRegistrationChallengeMethodResult.createErrorData(error));
         return result;
     }
     /**
-     * Checks if the result is in a failed state.
+     * Checks if the result indicates that verification is required.
+     * @returns true if verification is required, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isFailed() {
-        return this.state instanceof SignInFailedState;
+    isVerificationRequired() {
+        return (this.state.constructor?.name ===
+            "AuthMethodVerificationRequiredState");
     }
     /**
-     * Checks if the result is in a completed state.
+     * Checks if the result indicates that registration is completed (fast-pass scenario).
+     * @returns true if registration is completed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isCompleted() {
-        return this.state instanceof SignInCompletedState;
+        return (this.state.constructor?.name ===
+            "AuthMethodRegistrationCompletedState");
+    }
+    /**
+     * Checks if the result is in a failed state.
+     * @returns true if the result is failed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isFailed() {
+        return this.state instanceof AuthMethodRegistrationFailedState;
     }
 }
@@ -8371,18 +8451,36 @@ class SignInSubmitCodeResult extends AuthFlowResultBase {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/*
- * Base state handler for sign-in flow.
+/**
+ * Result of submitting a challenge for authentication method registration.
  */
-class SignInState extends AuthFlowActionRequiredStateBase {
-    /*
-     * Creates a new SignInState.
-     * @param stateParameters - The state parameters for sign-in.
+class AuthMethodRegistrationSubmitChallengeResult extends AuthFlowResultBase {
+    /**
+     * Creates an AuthMethodRegistrationSubmitChallengeResult with an error.
+     * @param error The error that occurred.
+     * @returns The AuthMethodRegistrationSubmitChallengeResult with error.
      */
-    constructor(stateParameters) {
-        super(stateParameters);
-        ensureArgumentIsNotEmptyString("username", stateParameters.username, stateParameters.correlationId);
-        ensureArgumentIsNotEmptyString("continuationToken", stateParameters.continuationToken, stateParameters.correlationId);
+    static createWithError(error) {
+        const result = new AuthMethodRegistrationSubmitChallengeResult(new AuthMethodRegistrationFailedState());
+        result.error = new AuthMethodRegistrationSubmitChallengeError(AuthMethodRegistrationSubmitChallengeResult.createErrorData(error));
+        return result;
+    }
+    /**
+     * Checks if the result indicates that registration is completed.
+     * @returns true if registration is completed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isCompleted() {
+        return (this.state.constructor?.name ===
+            "AuthMethodRegistrationCompletedState");
+    }
+    /**
+     * Checks if the result is in a failed state.
+     * @returns true if the result is failed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isFailed() {
+        return this.state instanceof AuthMethodRegistrationFailedState;
     }
 }
@@ -8390,174 +8488,179 @@ class SignInState extends AuthFlowActionRequiredStateBase {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-const SIGN_IN_CODE_SEND_RESULT_TYPE = "SignInCodeSendResult";
-const SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE = "SignInPasswordRequiredResult";
-const SIGN_IN_COMPLETED_RESULT_TYPE = "SignInCompletedResult";
-const SIGN_IN_JIT_REQUIRED_RESULT_TYPE = "SignInJitRequiredResult";
-const SIGN_IN_MFA_REQUIRED_RESULT_TYPE = "SignInMfaRequiredResult";
-function createSignInCompleteResult(input) {
-    return {
-        type: SIGN_IN_COMPLETED_RESULT_TYPE,
-        ...input,
-    };
-}
-function createSignInPasswordRequiredResult(input) {
-    return {
-        type: SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE,
-        ...input,
-    };
-}
-function createSignInCodeSendResult(input) {
-    return {
-        type: SIGN_IN_CODE_SEND_RESULT_TYPE,
-        ...input,
-    };
-}
-function createSignInJitRequiredResult(input) {
-    return {
-        type: SIGN_IN_JIT_REQUIRED_RESULT_TYPE,
-        ...input,
-    };
-}
-function createSignInMfaRequiredResult(input) {
-    return {
-        type: SIGN_IN_MFA_REQUIRED_RESULT_TYPE,
-        ...input,
-    };
+class AuthMethodRegistrationCompletedState extends AuthFlowStateBase {
 }
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/*
- * Sign-in code required state.
+/**
+ * Abstract base class for authentication method registration states.
  */
-class SignInCodeRequiredState extends SignInState {
+class AuthMethodRegistrationState extends AuthFlowActionRequiredStateBase {
     /**
-     * Once user configures email one-time passcode as a authentication method in Microsoft Entra, a one-time passcode will be sent to the user’s email.
-     * Submit this one-time passcode to continue sign-in flow.
-     * @param {string} code - The code to submit.
-     * @returns {Promise<SignInSubmitCodeResult>} The result of the operation.
-     */
-    async submitCode(code) {
+     * Internal method to challenge an authentication method.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     */
+    async challengeAuthMethodInternal(authMethodDetails) {
         try {
-            this.ensureCodeIsValid(code, this.stateParameters.codeLength);
-            const submitCodeParams = {
-                clientId: this.stateParameters.config.auth.clientId,
+            this.stateParameters.logger.verbose(`Challenging authentication method - '${authMethodDetails.authMethodType.id}' for auth method registration.`, this.stateParameters.correlationId);
+            const challengeParams = {
                 correlationId: this.stateParameters.correlationId,
-                challengeType: this.stateParameters.config.customAuth.challengeTypes ?? [],
-                scopes: this.stateParameters.scopes ?? [],
                 continuationToken: this.stateParameters.continuationToken ?? "",
-                code: code,
+                authMethod: authMethodDetails.authMethodType,
+                verificationContact: authMethodDetails.verificationContact,
+                scopes: this.stateParameters.scopes ?? [],
                 username: this.stateParameters.username,
                 claims: this.stateParameters.claims,
             };
-            this.stateParameters.logger.verbose("Submitting code for sign-in.", this.stateParameters.correlationId);
-            const submitCodeResult = await this.stateParameters.signInClient.submitCode(submitCodeParams);
-            this.stateParameters.logger.verbose("Code submitted for sign-in.", this.stateParameters.correlationId);
-            if (submitCodeResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
-                const accountInfo = new CustomAuthAccountData(submitCodeResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
-                return new SignInSubmitCodeResult(new SignInCompletedState(), accountInfo);
+            const result = await this.stateParameters.jitClient.challengeAuthMethod(challengeParams);
+            this.stateParameters.logger.verbose("Authentication method challenged successfully for auth method registration.", this.stateParameters.correlationId);
+            if (result.type === JIT_VERIFICATION_REQUIRED_RESULT_TYPE) {
+                // Verification required
+                this.stateParameters.logger.verbose("Auth method verification required.", this.stateParameters.correlationId);
+                return new AuthMethodRegistrationChallengeMethodResult(new AuthMethodVerificationRequiredState({
+                    correlationId: result.correlationId,
+                    continuationToken: result.continuationToken,
+                    config: this.stateParameters.config,
+                    logger: this.stateParameters.logger,
+                    jitClient: this.stateParameters.jitClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    challengeChannel: result.challengeChannel,
+                    challengeTargetLabel: result.challengeTargetLabel,
+                    codeLength: result.codeLength,
+                    scopes: this.stateParameters.scopes ?? [],
+                    username: this.stateParameters.username,
+                    claims: this.stateParameters.claims,
+                }));
+            }
+            else if (result.type === JIT_COMPLETED_RESULT_TYPE) {
+                // Registration completed (fast-pass scenario)
+                this.stateParameters.logger.verbose("Auth method registration completed via fast-pass.", this.stateParameters.correlationId);
+                const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+                return new AuthMethodRegistrationChallengeMethodResult(new AuthMethodRegistrationCompletedState(), accountInfo);
             }
             else {
-                // Unexpected result type
-                const result = submitCodeResult;
-                const error = new Error(`Unexpected result type: ${result.type}`);
-                return SignInSubmitCodeResult.createWithError(error);
+                // Handle unexpected result type with proper typing
+                this.stateParameters.logger.error("Unexpected result type from auth challenge method", this.stateParameters.correlationId);
+                throw new UnexpectedError("Unexpected result type from auth challenge method");
             }
         }
         catch (error) {
-            this.stateParameters.logger.errorPii(`Failed to submit code for sign-in. Error: ${error}.`, this.stateParameters.correlationId);
-            return SignInSubmitCodeResult.createWithError(error);
+            this.stateParameters.logger.error("Failed to challenge authentication method for auth method registration.", this.stateParameters.correlationId);
+            return AuthMethodRegistrationChallengeMethodResult.createWithError(error);
         }
     }
+}
+/**
+ * State indicating that authentication method registration is required.
+ */
+class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationState {
     /**
-     * Resends the another one-time passcode for sign-in flow if the previous one hasn't been verified.
-     * @returns {Promise<SignInResendCodeResult>} The result of the operation.
+     * Gets the available authentication methods for registration.
+     * @returns Array of available authentication methods.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    async resendCode() {
+    getAuthMethods() {
+        return this.stateParameters.authMethods;
+    }
+    /**
+     * Challenges an authentication method for registration.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async challengeAuthMethod(authMethodDetails) {
+        return this.challengeAuthMethodInternal(authMethodDetails);
+    }
+}
+/**
+ * State indicating that verification is required for the challenged authentication method.
+ */
+class AuthMethodVerificationRequiredState extends AuthMethodRegistrationState {
+    /**
+     * Gets the length of the expected verification code.
+     * @returns The code length.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getCodeLength() {
+        return this.stateParameters.codeLength;
+    }
+    /**
+     * Gets the channel through which the challenge was sent.
+     * @returns The challenge channel (e.g., "email").
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getChannel() {
+        return this.stateParameters.challengeChannel;
+    }
+    /**
+     * Gets the target label indicating where the challenge was sent.
+     * @returns The challenge target label (e.g., masked email address).
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getSentTo() {
+        return this.stateParameters.challengeTargetLabel;
+    }
+    /**
+     * Submits the verification challenge to complete the authentication method registration.
+     * @param code The verification code entered by the user.
+     * @returns Promise that resolves to AuthMethodRegistrationSubmitChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async submitChallenge(code) {
         try {
-            const submitCodeParams = {
-                clientId: this.stateParameters.config.auth.clientId,
+            this.ensureCodeIsValid(code, this.getCodeLength());
+            this.stateParameters.logger.verbose("Submitting auth method challenge.", this.stateParameters.correlationId);
+            const submitParams = {
                 correlationId: this.stateParameters.correlationId,
-                challengeType: this.stateParameters.config.customAuth.challengeTypes ?? [],
                 continuationToken: this.stateParameters.continuationToken ?? "",
+                scopes: this.stateParameters.scopes ?? [],
+                grantType: GrantType.OOB,
+                challenge: code,
                 username: this.stateParameters.username,
+                claims: this.stateParameters.claims,
             };
-            this.stateParameters.logger.verbose("Resending code for sign-in.", this.stateParameters.correlationId);
-            const result = await this.stateParameters.signInClient.resendCode(submitCodeParams);
-            this.stateParameters.logger.verbose("Code resent for sign-in.", this.stateParameters.correlationId);
-            return new SignInResendCodeResult(new SignInCodeRequiredState({
-                correlationId: result.correlationId,
-                continuationToken: result.continuationToken,
-                logger: this.stateParameters.logger,
-                config: this.stateParameters.config,
-                signInClient: this.stateParameters.signInClient,
-                cacheClient: this.stateParameters.cacheClient,
-                jitClient: this.stateParameters.jitClient,
-                username: this.stateParameters.username,
-                codeLength: result.codeLength,
-                scopes: this.stateParameters.scopes,
-            }));
+            const result = await this.stateParameters.jitClient.submitChallenge(submitParams);
+            this.stateParameters.logger.verbose("Auth method challenge submitted successfully.", this.stateParameters.correlationId);
+            const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+            return new AuthMethodRegistrationSubmitChallengeResult(new AuthMethodRegistrationCompletedState(), accountInfo);
         }
         catch (error) {
-            return SignInResendCodeResult.createWithError(error);
+            this.stateParameters.logger.error("Failed to submit auth method challenge.", this.stateParameters.correlationId);
+            return AuthMethodRegistrationSubmitChallengeResult.createWithError(error);
         }
     }
     /**
-     * Gets the sent code length.
-     * @returns {number} The length of the code.
-     */
-    getCodeLength() {
-        return this.stateParameters.codeLength;
-    }
-    /**
-     * Gets the scopes to request.
-     * @returns {string[] | undefined} The scopes to request.
+     * Challenges a different authentication method for registration.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    getScopes() {
-        return this.stateParameters.scopes;
+    async challengeAuthMethod(authMethodDetails) {
+        return this.challengeAuthMethodInternal(authMethodDetails);
     }
 }
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-// Result type constants
-const JIT_VERIFICATION_REQUIRED_RESULT_TYPE = "JitVerificationRequiredResult";
-const JIT_COMPLETED_RESULT_TYPE = "JitCompletedResult";
-function createJitVerificationRequiredResult(input) {
-    return {
-        type: JIT_VERIFICATION_REQUIRED_RESULT_TYPE,
-        ...input,
-    };
-}
-function createJitCompletedResult(input) {
-    return {
-        type: JIT_COMPLETED_RESULT_TYPE,
-        ...input,
-    };
-}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
 /**
- * Error that occurred during authentication method challenge request.
+ * Error that occurred during MFA challenge request.
  */
-class AuthMethodRegistrationChallengeMethodError extends AuthActionErrorBase {
+class MfaRequestChallengeError extends AuthActionErrorBase {
     /**
-     * Checks if the input for auth method registration is incorrect.
+     * Checks if the input for MFA challenge is incorrect.
      * @returns true if the input is incorrect, false otherwise.
      */
     isInvalidInput() {
         return this.isInvalidInputError();
     }
     /**
-     * Checks if the error is due to the verification contact (e.g., phone number or email) being blocked. Consider using a different email/phone number or a different authentication method.
+     * Checks if the error is due to the verification contact (e.g., phone number or email) being blocked. Consider contacting customer support for assistance.
      * @returns true if the error is due to the verification contact being blocked, false otherwise.
      */
     isVerificationContactBlocked() {
@@ -8565,12 +8668,12 @@ class AuthMethodRegistrationChallengeMethodError extends AuthActionErrorBase {
     }
 }
 /**
- * Error that occurred during authentication method challenge submission.
+ * Error that occurred during MFA challenge submission.
  */
-class AuthMethodRegistrationSubmitChallengeError extends AuthActionErrorBase {
+class MfaSubmitChallengeError extends AuthActionErrorBase {
     /**
-     * Checks if the submitted challenge code is incorrect.
-     * @returns true if the challenge code is incorrect, false otherwise.
+     * Checks if the submitted challenge code (e.g., OTP code) is incorrect.
+     * @returns true if the challenge code is invalid, false otherwise.
      */
     isIncorrectChallenge() {
         return this.isInvalidCodeError();
@@ -8581,7 +8684,10 @@ class AuthMethodRegistrationSubmitChallengeError extends AuthActionErrorBase {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-class AuthMethodRegistrationFailedState extends AuthFlowStateBase {
+/**
+ * State indicating that the MFA flow has completed successfully.
+ */
+class MfaCompletedState extends AuthFlowStateBase {
 }
 /*
@@ -8589,37 +8695,36 @@ class AuthMethodRegistrationFailedState extends AuthFlowStateBase {
  * Licensed under the MIT License.
  */
 /**
- * Result of challenging an authentication method for registration.
- * Uses base state type to avoid circular dependencies.
+ * State indicating that the MFA flow has failed.
  */
-class AuthMethodRegistrationChallengeMethodResult extends AuthFlowResultBase {
+class MfaFailedState extends AuthFlowStateBase {
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Result of submitting an MFA challenge.
+ */
+class MfaSubmitChallengeResult extends AuthFlowResultBase {
     /**
-     * Creates an AuthMethodRegistrationChallengeMethodResult with an error.
+     * Creates an MfaSubmitChallengeResult with an error.
      * @param error The error that occurred.
-     * @returns The AuthMethodRegistrationChallengeMethodResult with error.
+     * @returns The MfaSubmitChallengeResult with error.
      */
     static createWithError(error) {
-        const result = new AuthMethodRegistrationChallengeMethodResult(new AuthMethodRegistrationFailedState());
-        result.error = new AuthMethodRegistrationChallengeMethodError(AuthMethodRegistrationChallengeMethodResult.createErrorData(error));
+        const result = new MfaSubmitChallengeResult(new MfaFailedState());
+        result.error = new MfaSubmitChallengeError(MfaSubmitChallengeResult.createErrorData(error));
         return result;
     }
     /**
-     * Checks if the result indicates that verification is required.
-     * @returns true if verification is required, false otherwise.
-     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
-     */
-    isVerificationRequired() {
-        return (this.state.constructor?.name ===
-            "AuthMethodVerificationRequiredState");
-    }
-    /**
-     * Checks if the result indicates that registration is completed (fast-pass scenario).
-     * @returns true if registration is completed, false otherwise.
+     * Checks if the MFA flow is completed successfully.
+     * @returns true if completed, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isCompleted() {
-        return (this.state.constructor?.name ===
-            "AuthMethodRegistrationCompletedState");
+        return this.state instanceof MfaCompletedState;
     }
     /**
      * Checks if the result is in a failed state.
@@ -8627,7 +8732,7 @@ class AuthMethodRegistrationChallengeMethodResult extends AuthFlowResultBase {
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isFailed() {
-        return this.state instanceof AuthMethodRegistrationFailedState;
+        return this.state instanceof MfaFailedState;
     }
 }
@@ -8636,27 +8741,27 @@ class AuthMethodRegistrationChallengeMethodResult extends AuthFlowResultBase {
  * Licensed under the MIT License.
  */
 /**
- * Result of submitting a challenge for authentication method registration.
+ * Result of requesting an MFA challenge.
+ * Uses base state type to avoid circular dependencies.
  */
-class AuthMethodRegistrationSubmitChallengeResult extends AuthFlowResultBase {
+class MfaRequestChallengeResult extends AuthFlowResultBase {
     /**
-     * Creates an AuthMethodRegistrationSubmitChallengeResult with an error.
+     * Creates an MfaRequestChallengeResult with an error.
      * @param error The error that occurred.
-     * @returns The AuthMethodRegistrationSubmitChallengeResult with error.
+     * @returns The MfaRequestChallengeResult with error.
      */
     static createWithError(error) {
-        const result = new AuthMethodRegistrationSubmitChallengeResult(new AuthMethodRegistrationFailedState());
-        result.error = new AuthMethodRegistrationSubmitChallengeError(AuthMethodRegistrationSubmitChallengeResult.createErrorData(error));
+        const result = new MfaRequestChallengeResult(new MfaFailedState());
+        result.error = new MfaRequestChallengeError(MfaRequestChallengeResult.createErrorData(error));
         return result;
     }
     /**
-     * Checks if the result indicates that registration is completed.
-     * @returns true if registration is completed, false otherwise.
+     * Checks if the result indicates that verification is required.
+     * @returns true if verification is required, false otherwise.
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
-    isCompleted() {
-        return (this.state.constructor?.name ===
-            "AuthMethodRegistrationCompletedState");
+    isVerificationRequired() {
+        return this.state.constructor?.name === "MfaVerificationRequiredState";
     }
     /**
      * Checks if the result is in a failed state.
@@ -8664,7 +8769,7 @@ class AuthMethodRegistrationSubmitChallengeResult extends AuthFlowResultBase {
      * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isFailed() {
-        return this.state instanceof AuthMethodRegistrationFailedState;
+        return this.state instanceof MfaFailedState;
     }
 }
@@ -8672,159 +8777,370 @@ class AuthMethodRegistrationSubmitChallengeResult extends AuthFlowResultBase {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-class AuthMethodRegistrationCompletedState extends AuthFlowStateBase {
+class MfaState extends AuthFlowActionRequiredStateBase {
+    /**
+     * Requests an MFA challenge for a specific authentication method.
+     * @param authMethodId The authentication method ID to use for the challenge.
+     * @returns Promise that resolves to MfaRequestChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async requestChallenge(authMethodId) {
+        try {
+            ensureArgumentIsNotEmptyString("authMethodId", authMethodId);
+            this.stateParameters.logger.verbose(`Requesting MFA challenge with authentication method - '${authMethodId}'.`, this.stateParameters.correlationId);
+            const requestParams = {
+                correlationId: this.stateParameters.correlationId,
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                challengeType: this.stateParameters.config.customAuth.challengeTypes ?? [],
+                authMethodId: authMethodId,
+            };
+            const result = await this.stateParameters.mfaClient.requestChallenge(requestParams);
+            this.stateParameters.logger.verbose("MFA challenge requested successfully.", this.stateParameters.correlationId);
+            return new MfaRequestChallengeResult(new MfaVerificationRequiredState({
+                correlationId: result.correlationId,
+                continuationToken: result.continuationToken,
+                config: this.stateParameters.config,
+                logger: this.stateParameters.logger,
+                mfaClient: this.stateParameters.mfaClient,
+                cacheClient: this.stateParameters.cacheClient,
+                challengeChannel: result.challengeChannel,
+                challengeTargetLabel: result.challengeTargetLabel,
+                codeLength: result.codeLength,
+                selectedAuthMethodId: authMethodId,
+                scopes: this.stateParameters.scopes ?? [],
+            }));
+        }
+        catch (error) {
+            this.stateParameters.logger.errorPii(`Failed to request MFA challenge. Error: ${error}.`, this.stateParameters.correlationId);
+            return MfaRequestChallengeResult.createWithError(error);
+        }
+    }
+}
+/**
+ * State indicating that MFA is required and awaiting user action.
+ * This state allows the developer to pause execution before sending the code to the user's email.
+ */
+class MfaAwaitingState extends MfaState {
+    /**
+     * Gets the available authentication methods for MFA.
+     * @returns Array of available authentication methods.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getAuthMethods() {
+        return this.stateParameters.authMethods;
+    }
+}
+/**
+ * State indicating that MFA verification is required.
+ * The challenge has been sent and the user needs to provide the code.
+ */
+class MfaVerificationRequiredState extends MfaState {
+    /**
+     * Gets the length of the code that the user needs to provide.
+     * @returns The expected code length.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getCodeLength() {
+        return this.stateParameters.codeLength;
+    }
+    /**
+     * Gets the channel through which the challenge was sent.
+     * @returns The challenge channel (e.g., "email").
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getChannel() {
+        return this.stateParameters.challengeChannel;
+    }
+    /**
+     * Gets the target label indicating where the challenge was sent.
+     * @returns The challenge target label (e.g., masked email address).
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getSentTo() {
+        return this.stateParameters.challengeTargetLabel;
+    }
+    /**
+     * Submits the MFA challenge (e.g., OTP code) to complete the authentication.
+     * @param challenge The challenge code (e.g., OTP code) entered by the user.
+     * @returns Promise that resolves to MfaSubmitChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async submitChallenge(challenge) {
+        try {
+            this.ensureCodeIsValid(challenge, this.getCodeLength());
+            this.stateParameters.logger.verbose("Submitting MFA challenge.", this.stateParameters.correlationId);
+            const submitParams = {
+                correlationId: this.stateParameters.correlationId,
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                scopes: this.stateParameters.scopes ?? [],
+                challenge: challenge,
+            };
+            const result = await this.stateParameters.mfaClient.submitChallenge(submitParams);
+            this.stateParameters.logger.verbose("MFA challenge submitted successfully.", this.stateParameters.correlationId);
+            const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+            return new MfaSubmitChallengeResult(new MfaCompletedState(), accountInfo);
+        }
+        catch (error) {
+            this.stateParameters.logger.errorPii(`Failed to submit MFA challenge. Error: ${error}.`, this.stateParameters.correlationId);
+            return MfaSubmitChallengeResult.createWithError(error);
+        }
+    }
 }
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/**
- * Abstract base class for authentication method registration states.
+/*
+ * Result of a sign-in submit code operation.
  */
-class AuthMethodRegistrationState extends AuthFlowActionRequiredStateBase {
+class SignInSubmitCodeResult extends AuthFlowResultBase {
     /**
-     * Internal method to challenge an authentication method.
-     * @param authMethodDetails The authentication method details to challenge.
-     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * Creates a new instance of SignInSubmitCodeResult with error data.
+     * @param error The error that occurred.
+     * @returns {SignInSubmitCodeResult} A new instance of SignInSubmitCodeResult with the error set.
      */
-    async challengeAuthMethodInternal(authMethodDetails) {
+    static createWithError(error) {
+        const result = new SignInSubmitCodeResult(new SignInFailedState());
+        result.error = new SignInSubmitCodeError(SignInSubmitCodeResult.createErrorData(error));
+        return result;
+    }
+    /**
+     * Checks if the result is in a failed state.
+     */
+    isFailed() {
+        return this.state instanceof SignInFailedState;
+    }
+    /**
+     * Checks if the result is in a completed state.
+     */
+    isCompleted() {
+        return this.state instanceof SignInCompletedState;
+    }
+    /**
+     * Checks if the result requires authentication method registration.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isAuthMethodRegistrationRequired() {
+        return this.state instanceof AuthMethodRegistrationRequiredState;
+    }
+    /**
+     * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isMfaRequired() {
+        return this.state instanceof MfaAwaitingState;
+    }
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+const SIGN_IN_CODE_SEND_RESULT_TYPE = "SignInCodeSendResult";
+const SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE = "SignInPasswordRequiredResult";
+const SIGN_IN_COMPLETED_RESULT_TYPE = "SignInCompletedResult";
+const SIGN_IN_JIT_REQUIRED_RESULT_TYPE = "SignInJitRequiredResult";
+const SIGN_IN_MFA_REQUIRED_RESULT_TYPE = "SignInMfaRequiredResult";
+function createSignInCompleteResult(input) {
+    return {
+        type: SIGN_IN_COMPLETED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createSignInPasswordRequiredResult(input) {
+    return {
+        type: SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createSignInCodeSendResult(input) {
+    return {
+        type: SIGN_IN_CODE_SEND_RESULT_TYPE,
+        ...input,
+    };
+}
+function createSignInJitRequiredResult(input) {
+    return {
+        type: SIGN_IN_JIT_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createSignInMfaRequiredResult(input) {
+    return {
+        type: SIGN_IN_MFA_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/*
+ * Base state handler for sign-in flow.
+ */
+class SignInState extends AuthFlowActionRequiredStateBase {
+    /*
+     * Creates a new SignInState.
+     * @param stateParameters - The state parameters for sign-in.
+     */
+    constructor(stateParameters) {
+        super(stateParameters);
+        ensureArgumentIsNotEmptyString("username", stateParameters.username, stateParameters.correlationId);
+        ensureArgumentIsNotEmptyString("continuationToken", stateParameters.continuationToken, stateParameters.correlationId);
+    }
+    /**
+     * Handles the result of a sign-in attempt.
+     * @param result - The result of the sign-in attempt.
+     * @param scopes - The scopes requested for the sign-in.
+     * @returns An object containing the next state and account information, if applicable.
+     */
+    handleSignInResult(result, scopes) {
+        const correlationId = result.correlationId || this.stateParameters.correlationId;
+        if (result.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
+            // Sign-in completed - return SignInCompletedState
+            this.stateParameters.logger.verbose("Sign-in completed successfully.", correlationId);
+            const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, correlationId);
+            return {
+                state: new SignInCompletedState(),
+                accountInfo: accountInfo,
+            };
+        }
+        else if (result.type === SIGN_IN_JIT_REQUIRED_RESULT_TYPE) {
+            // JIT is required - return AuthMethodRegistrationRequiredState
+            this.stateParameters.logger.verbose("Authentication method registration is required during sign-in.", correlationId);
+            return {
+                state: new AuthMethodRegistrationRequiredState({
+                    correlationId: correlationId,
+                    continuationToken: result.continuationToken,
+                    logger: this.stateParameters.logger,
+                    config: this.stateParameters.config,
+                    jitClient: this.stateParameters.jitClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    authMethods: result.authMethods,
+                    username: this.stateParameters.username,
+                    scopes: scopes ?? [],
+                    claims: this.stateParameters.claims,
+                }),
+            };
+        }
+        else if (result.type === SIGN_IN_MFA_REQUIRED_RESULT_TYPE) {
+            // MFA is required - return MfaAwaitingState
+            this.stateParameters.logger.verbose("MFA is required during the sign-in.", correlationId);
+            return {
+                state: new MfaAwaitingState({
+                    correlationId: correlationId,
+                    continuationToken: result.continuationToken,
+                    logger: this.stateParameters.logger,
+                    config: this.stateParameters.config,
+                    mfaClient: this.stateParameters.mfaClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    scopes: scopes ?? [],
+                    authMethods: result.authMethods ?? [],
+                }),
+            };
+        }
+        else {
+            // Unexpected result type
+            const unexpectedResult = result;
+            const error = new Error(`Unexpected result type: ${unexpectedResult.type}`);
+            return {
+                state: new SignInFailedState(),
+                error: error,
+            };
+        }
+    }
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/*
+ * Sign-in code required state.
+ */
+class SignInCodeRequiredState extends SignInState {
+    /**
+     * Once user configures email one-time passcode as a authentication method in Microsoft Entra, a one-time passcode will be sent to the user’s email.
+     * Submit this one-time passcode to continue sign-in flow.
+     * @param {string} code - The code to submit.
+     * @returns {Promise<SignInSubmitCodeResult>} The result of the operation.
+     */
+    async submitCode(code) {
         try {
-            this.stateParameters.logger.verbose(`Challenging authentication method - '${authMethodDetails.authMethodType.id}' for auth method registration.`, this.stateParameters.correlationId);
-            const challengeParams = {
+            this.ensureCodeIsValid(code, this.stateParameters.codeLength);
+            const submitCodeParams = {
+                clientId: this.stateParameters.config.auth.clientId,
                 correlationId: this.stateParameters.correlationId,
-                continuationToken: this.stateParameters.continuationToken ?? "",
-                authMethod: authMethodDetails.authMethodType,
-                verificationContact: authMethodDetails.verificationContact,
+                challengeType: this.stateParameters.config.customAuth.challengeTypes ?? [],
                 scopes: this.stateParameters.scopes ?? [],
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                code: code,
                 username: this.stateParameters.username,
                 claims: this.stateParameters.claims,
             };
-            const result = await this.stateParameters.jitClient.challengeAuthMethod(challengeParams);
-            this.stateParameters.logger.verbose("Authentication method challenged successfully for auth method registration.", this.stateParameters.correlationId);
-            if (result.type === JIT_VERIFICATION_REQUIRED_RESULT_TYPE) {
-                // Verification required
-                this.stateParameters.logger.verbose("Auth method verification required.", this.stateParameters.correlationId);
-                return new AuthMethodRegistrationChallengeMethodResult(new AuthMethodVerificationRequiredState({
-                    correlationId: result.correlationId,
-                    continuationToken: result.continuationToken,
-                    config: this.stateParameters.config,
-                    logger: this.stateParameters.logger,
-                    jitClient: this.stateParameters.jitClient,
-                    cacheClient: this.stateParameters.cacheClient,
-                    challengeChannel: result.challengeChannel,
-                    challengeTargetLabel: result.challengeTargetLabel,
-                    codeLength: result.codeLength,
-                    scopes: this.stateParameters.scopes ?? [],
-                    username: this.stateParameters.username,
-                    claims: this.stateParameters.claims,
-                }));
-            }
-            else if (result.type === JIT_COMPLETED_RESULT_TYPE) {
-                // Registration completed (fast-pass scenario)
-                this.stateParameters.logger.verbose("Auth method registration completed via fast-pass.", this.stateParameters.correlationId);
-                const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
-                return new AuthMethodRegistrationChallengeMethodResult(new AuthMethodRegistrationCompletedState(), accountInfo);
-            }
-            else {
-                // Handle unexpected result type with proper typing
-                this.stateParameters.logger.error("Unexpected result type from auth challenge method", this.stateParameters.correlationId);
-                throw new UnexpectedError("Unexpected result type from auth challenge method");
+            this.stateParameters.logger.verbose("Submitting code for sign-in.", this.stateParameters.correlationId);
+            const submitCodeResult = await this.stateParameters.signInClient.submitCode(submitCodeParams);
+            this.stateParameters.logger.verbose("Code submitted for sign-in.", this.stateParameters.correlationId);
+            const nextState = this.handleSignInResult(submitCodeResult, this.stateParameters.scopes);
+            if (nextState.error) {
+                return SignInSubmitCodeResult.createWithError(nextState.error);
             }
+            return new SignInSubmitCodeResult(nextState.state, nextState.accountInfo);
         }
         catch (error) {
-            this.stateParameters.logger.error("Failed to challenge authentication method for auth method registration.", this.stateParameters.correlationId);
-            return AuthMethodRegistrationChallengeMethodResult.createWithError(error);
+            this.stateParameters.logger.errorPii(`Failed to submit code for sign-in. Error: ${error}.`, this.stateParameters.correlationId);
+            return SignInSubmitCodeResult.createWithError(error);
         }
     }
-}
-/**
- * State indicating that authentication method registration is required.
- */
-class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationState {
-    /**
-     * Gets the available authentication methods for registration.
-     * @returns Array of available authentication methods.
-     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
-     */
-    getAuthMethods() {
-        return this.stateParameters.authMethods;
-    }
-    /**
-     * Challenges an authentication method for registration.
-     * @param authMethodDetails The authentication method details to challenge.
-     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
-     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
-     */
-    async challengeAuthMethod(authMethodDetails) {
-        return this.challengeAuthMethodInternal(authMethodDetails);
-    }
-}
-/**
- * State indicating that verification is required for the challenged authentication method.
- */
-class AuthMethodVerificationRequiredState extends AuthMethodRegistrationState {
-    /**
-     * Gets the length of the expected verification code.
-     * @returns The code length.
-     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
-     */
-    getCodeLength() {
-        return this.stateParameters.codeLength;
-    }
-    /**
-     * Gets the channel through which the challenge was sent.
-     * @returns The challenge channel (e.g., "email").
-     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
-     */
-    getChannel() {
-        return this.stateParameters.challengeChannel;
-    }
-    /**
-     * Gets the target label indicating where the challenge was sent.
-     * @returns The challenge target label (e.g., masked email address).
-     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
-     */
-    getSentTo() {
-        return this.stateParameters.challengeTargetLabel;
-    }
     /**
-     * Submits the verification challenge to complete the authentication method registration.
-     * @param code The verification code entered by the user.
-     * @returns Promise that resolves to AuthMethodRegistrationSubmitChallengeResult.
-     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     * Resends the another one-time passcode for sign-in flow if the previous one hasn't been verified.
+     * @returns {Promise<SignInResendCodeResult>} The result of the operation.
      */
-    async submitChallenge(code) {
+    async resendCode() {
         try {
-            this.ensureCodeIsValid(code, this.getCodeLength());
-            this.stateParameters.logger.verbose("Submitting auth method challenge.", this.stateParameters.correlationId);
-            const submitParams = {
+            const submitCodeParams = {
+                clientId: this.stateParameters.config.auth.clientId,
                 correlationId: this.stateParameters.correlationId,
+                challengeType: this.stateParameters.config.customAuth.challengeTypes ?? [],
                 continuationToken: this.stateParameters.continuationToken ?? "",
-                scopes: this.stateParameters.scopes ?? [],
-                grantType: GrantType.OOB,
-                challenge: code,
                 username: this.stateParameters.username,
-                claims: this.stateParameters.claims,
             };
-            const result = await this.stateParameters.jitClient.submitChallenge(submitParams);
-            this.stateParameters.logger.verbose("Auth method challenge submitted successfully.", this.stateParameters.correlationId);
-            const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
-            return new AuthMethodRegistrationSubmitChallengeResult(new AuthMethodRegistrationCompletedState(), accountInfo);
+            this.stateParameters.logger.verbose("Resending code for sign-in.", this.stateParameters.correlationId);
+            const result = await this.stateParameters.signInClient.resendCode(submitCodeParams);
+            this.stateParameters.logger.verbose("Code resent for sign-in.", this.stateParameters.correlationId);
+            return new SignInResendCodeResult(new SignInCodeRequiredState({
+                correlationId: result.correlationId,
+                continuationToken: result.continuationToken,
+                logger: this.stateParameters.logger,
+                config: this.stateParameters.config,
+                signInClient: this.stateParameters.signInClient,
+                cacheClient: this.stateParameters.cacheClient,
+                jitClient: this.stateParameters.jitClient,
+                mfaClient: this.stateParameters.mfaClient,
+                username: this.stateParameters.username,
+                codeLength: result.codeLength,
+                scopes: this.stateParameters.scopes,
+            }));
         }
         catch (error) {
-            this.stateParameters.logger.error("Failed to submit auth method challenge.", this.stateParameters.correlationId);
-            return AuthMethodRegistrationSubmitChallengeResult.createWithError(error);
+            return SignInResendCodeResult.createWithError(error);
         }
     }
     /**
-     * Challenges a different authentication method for registration.
-     * @param authMethodDetails The authentication method details to challenge.
-     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
-     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     * Gets the sent code length.
+     * @returns {number} The length of the code.
      */
-    async challengeAuthMethod(authMethodDetails) {
-        return this.challengeAuthMethodInternal(authMethodDetails);
+    getCodeLength() {
+        return this.stateParameters.codeLength;
+    }
+    /**
+     * Gets the scopes to request.
+     * @returns {string[] | undefined} The scopes to request.
+     */
+    getScopes() {
+        return this.stateParameters.scopes;
     }
 }
@@ -8860,6 +9176,13 @@ class SignInSubmitPasswordResult extends AuthFlowResultBase {
     isAuthMethodRegistrationRequired() {
         return this.state instanceof AuthMethodRegistrationRequiredState;
     }
+    /**
+     * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isMfaRequired() {
+        return this.state instanceof MfaAwaitingState;
+    }
 }
 /*
@@ -8891,32 +9214,11 @@ class SignInPasswordRequiredState extends SignInState {
             this.stateParameters.logger.verbose("Submitting password for sign-in.", this.stateParameters.correlationId);
             const submitPasswordResult = await this.stateParameters.signInClient.submitPassword(submitPasswordParams);
             this.stateParameters.logger.verbose("Password submitted for sign-in.", this.stateParameters.correlationId);
-            if (submitPasswordResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
-                const accountInfo = new CustomAuthAccountData(submitPasswordResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
-                return new SignInSubmitPasswordResult(new SignInCompletedState(), accountInfo);
-            }
-            else if (submitPasswordResult.type === SIGN_IN_JIT_REQUIRED_RESULT_TYPE) {
-                // JIT is required - return AuthMethodRegistrationRequiredState
-                this.stateParameters.logger.verbose("Authentication method registration required after password submission.", this.stateParameters.correlationId);
-                return new SignInSubmitPasswordResult(new AuthMethodRegistrationRequiredState({
-                    correlationId: this.stateParameters.correlationId,
-                    continuationToken: submitPasswordResult.continuationToken,
-                    logger: this.stateParameters.logger,
-                    config: this.stateParameters.config,
-                    jitClient: this.stateParameters.jitClient,
-                    cacheClient: this.stateParameters.cacheClient,
-                    authMethods: submitPasswordResult.authMethods,
-                    username: this.stateParameters.username,
-                    scopes: this.stateParameters.scopes ?? [],
-                    claims: this.stateParameters.claims,
-                }));
-            }
-            else {
-                // Unexpected result type
-                const result = submitPasswordResult;
-                const error = new Error(`Unexpected result type: ${result.type}`);
-                return SignInSubmitPasswordResult.createWithError(error);
+            const nextState = this.handleSignInResult(submitPasswordResult, this.stateParameters.scopes);
+            if (nextState.error) {
+                return SignInSubmitPasswordResult.createWithError(nextState.error);
             }
+            return new SignInSubmitPasswordResult(nextState.state, nextState.accountInfo);
         }
         catch (error) {
             this.stateParameters.logger.errorPii(`Failed to sign in after submitting password. Error: ${error}.`, this.stateParameters.correlationId);
@@ -8988,6 +9290,13 @@ class SignInResult extends AuthFlowResultBase {
     isAuthMethodRegistrationRequired() {
         return this.state instanceof AuthMethodRegistrationRequiredState;
     }
+    /**
+     * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isMfaRequired() {
+        return this.state instanceof MfaAwaitingState;
+    }
 }
 /*
@@ -9139,35 +9448,11 @@ class SignInContinuationState extends SignInState {
             this.stateParameters.logger.verbose("Signing in with continuation token.", this.stateParameters.correlationId);
             const signInResult = await this.stateParameters.signInClient.signInWithContinuationToken(continuationTokenParams);
             this.stateParameters.logger.verbose("Signed in with continuation token.", this.stateParameters.correlationId);
-            if (signInResult.type === SIGN_IN_COMPLETED_RESULT_TYPE) {
-                // Sign-in completed successfully
-                const accountInfo = new CustomAuthAccountData(signInResult.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
-                return new SignInResult(new SignInCompletedState(), accountInfo);
-            }
-            else if (signInResult.type === SIGN_IN_JIT_REQUIRED_RESULT_TYPE) {
-                // JIT is required
-                this.stateParameters.logger.warning("Auth method registration required during continuation token sign-in.", this.stateParameters.correlationId);
-                // Return AuthMethodRegistrationRequiredState to handle JIT scenario
-                const authMethodRegistrationState = new AuthMethodRegistrationRequiredState({
-                    correlationId: this.stateParameters.correlationId,
-                    continuationToken: signInResult.continuationToken,
-                    logger: this.stateParameters.logger,
-                    config: this.stateParameters.config,
-                    jitClient: this.stateParameters.jitClient,
-                    cacheClient: this.stateParameters.cacheClient,
-                    authMethods: signInResult.authMethods,
-                    username: this.stateParameters.username,
-                    scopes: signInWithContinuationTokenInputs?.scopes ?? [],
-                    claims: this.stateParameters.claims,
-                });
-                return new SignInResult(authMethodRegistrationState);
-            }
-            else {
-                // Unexpected result type
-                const result = signInResult;
-                const error = new Error(`Unexpected result type: ${result.type}`);
-                return SignInResult.createWithError(error);
+            const nextState = this.handleSignInResult(signInResult, signInWithContinuationTokenInputs?.scopes);
+            if (nextState.error) {
+                return SignInResult.createWithError(nextState.error);
             }
+            return new SignInResult(nextState.state, nextState.accountInfo);
         }
         catch (error) {
             this.stateParameters.logger.errorPii(`Failed to sign in with continuation token. Error: ${error}.`, this.stateParameters.correlationId);
@@ -9306,6 +9591,7 @@ class SignUpAttributesRequiredState extends SignUpState {
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                     signInScenario: SignInScenario.SignInAfterSignUp,
                 }));
@@ -9453,6 +9739,7 @@ class SignUpPasswordRequiredState extends SignUpState {
                     signUpClient: this.stateParameters.signUpClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                     requiredAttributes: result.requiredAttributes,
                 }));
@@ -9468,6 +9755,7 @@ class SignUpPasswordRequiredState extends SignUpState {
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                     signInScenario: SignInScenario.SignInAfterSignUp,
                 }));
@@ -9570,6 +9858,7 @@ class SignUpCodeRequiredState extends SignUpState {
                     signUpClient: this.stateParameters.signUpClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                 }));
             }
@@ -9585,6 +9874,7 @@ class SignUpCodeRequiredState extends SignUpState {
                     signUpClient: this.stateParameters.signUpClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                     requiredAttributes: result.requiredAttributes,
                 }));
@@ -9600,6 +9890,7 @@ class SignUpCodeRequiredState extends SignUpState {
                     signInClient: this.stateParameters.signInClient,
                     cacheClient: this.stateParameters.cacheClient,
                     jitClient: this.stateParameters.jitClient,
+                    mfaClient: this.stateParameters.mfaClient,
                     username: this.stateParameters.username,
                     signInScenario: SignInScenario.SignInAfterSignUp,
                 }));
@@ -9635,6 +9926,7 @@ class SignUpCodeRequiredState extends SignUpState {
                 signUpClient: this.stateParameters.signUpClient,
                 cacheClient: this.stateParameters.cacheClient,
                 jitClient: this.stateParameters.jitClient,
+                mfaClient: this.stateParameters.mfaClient,
                 username: this.stateParameters.username,
                 codeLength: result.codeLength,
                 codeResendInterval: result.interval,
@@ -11091,7 +11383,10 @@ const PASSWORD_RESET_RESEND_CODE = 100044;
 const ACCOUNT_GET_ACCESS_TOKEN = 100063;
 // JIT (Just-In-Time) Auth Method Registration
 const JIT_CHALLENGE_AUTH_METHOD = 100081;
-const JIT_SUBMIT_CHALLENGE = 100082;
+const JIT_SUBMIT_CHALLENGE = 100082;
+// MFA
+const MFA_REQUEST_CHALLENGE = 100101;
+const MFA_SUBMIT_CHALLENGE = 100102;
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11530,6 +11825,7 @@ class ResetPasswordPasswordRequiredState extends ResetPasswordState {
                 signInClient: this.stateParameters.signInClient,
                 cacheClient: this.stateParameters.cacheClient,
                 jitClient: this.stateParameters.jitClient,
+                mfaClient: this.stateParameters.mfaClient,
                 signInScenario: SignInScenario.SignInAfterPasswordReset,
             }));
         }
@@ -11615,6 +11911,7 @@ class ResetPasswordCodeRequiredState extends ResetPasswordState {
                 signInClient: this.stateParameters.signInClient,
                 cacheClient: this.stateParameters.cacheClient,
                 jitClient: this.stateParameters.jitClient,
+                mfaClient: this.stateParameters.mfaClient,
                 username: this.stateParameters.username,
             }));
         }
@@ -11648,6 +11945,7 @@ class ResetPasswordCodeRequiredState extends ResetPasswordState {
                 signInClient: this.stateParameters.signInClient,
                 cacheClient: this.stateParameters.cacheClient,
                 jitClient: this.stateParameters.jitClient,
+                mfaClient: this.stateParameters.mfaClient,
                 username: this.stateParameters.username,
                 codeLength: result.codeLength,
             }));
@@ -12503,7 +12801,7 @@ class CustomAuthApiClient {
         this.signInApi = new SignInApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
         this.signUpApi = new SignupApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
         this.resetPasswordApi = new ResetPasswordApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
-        this.registerApi = new RegisterApiClient(customAuthApiBaseUrl, clientId, httpClient);
+        this.registerApi = new RegisterApiClient(customAuthApiBaseUrl, clientId, httpClient, customAuthApiQueryParams);
     }
 }
@@ -12821,6 +13119,99 @@ class JitClient extends CustomAuthInteractionClientBase {
     }
 }
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+// Result type constants
+const MFA_VERIFICATION_REQUIRED_RESULT_TYPE = "MfaVerificationRequiredResult";
+const MFA_COMPLETED_RESULT_TYPE = "MfaCompletedResult";
+function createMfaVerificationRequiredResult(input) {
+    return {
+        type: MFA_VERIFICATION_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createMfaCompletedResult(input) {
+    return {
+        type: MFA_COMPLETED_RESULT_TYPE,
+        ...input,
+    };
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * MFA client for handling multi-factor authentication flows.
+ */
+class MfaClient extends CustomAuthInteractionClientBase {
+    /**
+     * Requests an MFA challenge to be sent to the user.
+     * @param parameters The parameters for requesting the challenge.
+     * @returns Promise that resolves to either MfaVerificationRequiredResult.
+     */
+    async requestChallenge(parameters) {
+        const apiId = MFA_REQUEST_CHALLENGE;
+        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        this.logger.verbose("Calling challenge endpoint for MFA.", parameters.correlationId);
+        const challengeReq = {
+            challenge_type: this.getChallengeTypes(parameters.challengeType),
+            continuation_token: parameters.continuationToken,
+            id: parameters.authMethodId,
+            correlationId: parameters.correlationId,
+            telemetryManager: telemetryManager,
+        };
+        const challengeResponse = await this.customAuthApiClient.signInApi.requestChallenge(challengeReq);
+        this.logger.verbose("Challenge endpoint called for MFA.", parameters.correlationId);
+        if (challengeResponse.challenge_type === ChallengeType.OOB) {
+            // Verification required - code will be sent
+            return createMfaVerificationRequiredResult({
+                correlationId: challengeResponse.correlation_id,
+                continuationToken: challengeResponse.continuation_token ?? "",
+                challengeChannel: challengeResponse.challenge_channel ?? "",
+                challengeTargetLabel: challengeResponse.challenge_target_label ?? "",
+                codeLength: challengeResponse.code_length ??
+                    DefaultCustomAuthApiCodeLength,
+                bindingMethod: challengeResponse.binding_method ?? "",
+            });
+        }
+        this.logger.error(`Unsupported challenge type '${challengeResponse.challenge_type}' for MFA.`, parameters.correlationId);
+        throw new CustomAuthApiError(UNSUPPORTED_CHALLENGE_TYPE, `Unsupported challenge type '${challengeResponse.challenge_type}'.`, challengeResponse.correlation_id);
+    }
+    /**
+     * Submits the MFA challenge response (e.g., OTP code).
+     * @param parameters The parameters for submitting the challenge.
+     * @returns Promise that resolves to MfaCompletedResult.
+     */
+    async submitChallenge(parameters) {
+        ensureArgumentIsNotEmptyString("parameters.challenge", parameters.challenge, parameters.correlationId);
+        const apiId = MFA_SUBMIT_CHALLENGE;
+        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const scopes = this.getScopes(parameters.scopes);
+        const request = {
+            continuation_token: parameters.continuationToken,
+            oob: parameters.challenge,
+            grant_type: GrantType.MFA_OOB,
+            scope: scopes.join(" "),
+            correlationId: parameters.correlationId,
+            telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
+        };
+        this.logger.verbose("Calling token endpoint for MFA challenge submission.", parameters.correlationId);
+        const tokenResponse = await this.customAuthApiClient.signInApi.requestTokensWithOob(request);
+        // Save tokens and create authentication result
+        const result = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id ?? parameters.correlationId);
+        return createMfaCompletedResult({
+            correlationId: parameters.correlationId,
+            authenticationResult: result,
+        });
+    }
+}
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12848,38 +13239,40 @@ class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase {
      * @returns {Promise<AuthenticationResult>} The promise that resolves to an AuthenticationResult.
      */
     async acquireToken(silentRequest) {
+        const correlationId = silentRequest.correlationId || this.correlationId;
         const telemetryManager = this.initializeServerTelemetryManager(ACCOUNT_GET_ACCESS_TOKEN);
-        const clientConfig = this.getCustomAuthClientConfiguration(telemetryManager, this.customAuthAuthority);
+        const clientConfig = this.getCustomAuthClientConfiguration(telemetryManager, this.customAuthAuthority, correlationId);
         const silentFlowClient = new SilentFlowClient(clientConfig, this.performanceClient);
         try {
-            this.logger.verbose("Starting silent flow to acquire token from cache", this.correlationId);
+            this.logger.verbose("Starting silent flow to acquire token from cache", correlationId);
             const result = await silentFlowClient.acquireCachedToken(silentRequest);
-            this.logger.verbose("Silent flow to acquire token from cache is completed and token is found", this.correlationId);
+            this.logger.verbose("Silent flow to acquire token from cache is completed and token is found", correlationId);
             return result[0];
         }
         catch (error) {
             if (error instanceof ClientAuthError &&
                 error.errorCode === tokenRefreshRequired) {
-                this.logger.verbose("Token refresh is required to acquire token silently", this.correlationId);
+                this.logger.verbose("Token refresh is required to acquire token silently", correlationId);
                 const refreshTokenClient = new RefreshTokenClient(clientConfig, this.performanceClient);
-                this.logger.verbose("Starting refresh flow to refresh token", this.correlationId);
+                this.logger.verbose("Starting refresh flow to refresh token", correlationId);
                 const refreshTokenResult = await refreshTokenClient.acquireTokenByRefreshToken(silentRequest);
-                this.logger.verbose("Refresh flow to refresh token is completed", this.correlationId);
+                this.logger.verbose("Refresh flow to refresh token is completed", correlationId);
                 return refreshTokenResult;
             }
             throw error;
         }
     }
     async logout(logoutRequest) {
+        const correlationId = logoutRequest?.correlationId || this.correlationId;
         const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
         // Clear the cache
-        this.logger.verbose("Start to clear the cache", logoutRequest?.correlationId);
-        await this.clearCacheOnLogout(validLogoutRequest.correlationId, validLogoutRequest?.account);
-        this.logger.verbose("Cache cleared", logoutRequest?.correlationId);
+        this.logger.verbose("Start to clear the cache", correlationId);
+        await this.clearCacheOnLogout(correlationId, validLogoutRequest?.account);
+        this.logger.verbose("Cache cleared", correlationId);
         const postLogoutRedirectUri = this.config.auth.postLogoutRedirectUri;
         if (postLogoutRedirectUri) {
             const absoluteRedirectUri = UrlString.getAbsoluteUrl(postLogoutRedirectUri, getCurrentUri());
-            this.logger.verbose("Post logout redirect uri is set, redirecting to uri", logoutRequest?.correlationId);
+            this.logger.verbose("Post logout redirect uri is set, redirecting to uri", correlationId);
             // Redirect to post logout redirect uri
             await this.navigationClient.navigateExternal(absoluteRedirectUri, {
                 apiId: ApiId.logout,
@@ -12906,7 +13299,7 @@ class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase {
         }
         return account;
     }
-    getCustomAuthClientConfiguration(serverTelemetryManager, customAuthAuthority) {
+    getCustomAuthClientConfiguration(serverTelemetryManager, customAuthAuthority, correlationId) {
         const logger = this.config.system.loggerOptions;
         return {
             authOptions: {
@@ -12923,7 +13316,7 @@ class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase {
                 loggerCallback: logger.loggerCallback,
                 piiLoggingEnabled: logger.piiLoggingEnabled,
                 logLevel: logger.logLevel,
-                correlationId: this.correlationId,
+                correlationId: correlationId,
             },
             cacheOptions: {
                 claimsBasedCachingEnabled: this.config.cache.claimsBasedCachingEnabled,
@@ -15570,6 +15963,7 @@ class InteractionHandler {
  * Licensed under the MIT License.
  */
 const contentError = "ContentError";
+const pageException = "PageException";
 const userSwitch = "user_switch";
 /*
@@ -15616,6 +16010,7 @@ function isFatalNativeAuthError(error) {
     }
     switch (error.errorCode) {
         case contentError:
+        case pageException:
             return true;
         default:
             return false;
@@ -16275,6 +16670,7 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
             case PromptValue.NONE:
             case PromptValue.CONSENT:
             case PromptValue.LOGIN:
+            case PromptValue.SELECT_ACCOUNT:
                 this.logger.trace("initializeNativeRequest: prompt is compatible with native flow");
                 return prompt;
             default:
@@ -19877,6 +20273,7 @@ class StandardController {
                 case PromptValue.NONE:
                 case PromptValue.CONSENT:
                 case PromptValue.LOGIN:
+                case PromptValue.SELECT_ACCOUNT:
                     this.logger.trace("canUsePlatformBroker: prompt is compatible with platform broker flow");
                     break;
                 default:
@@ -20409,6 +20806,7 @@ class CustomAuthStandardController extends StandardController {
         this.resetPasswordClient =
             interactionClientFactory.create(ResetPasswordClient);
         this.jitClient = interactionClientFactory.create(JitClient);
+        this.mfaClient = interactionClientFactory.create(MfaClient);
         this.cacheClient = interactionClientFactory.create(CustomAuthSilentCacheClient);
     }
     /*
@@ -20468,6 +20866,7 @@ class CustomAuthStandardController extends StandardController {
                     signInClient: this.signInClient,
                     cacheClient: this.cacheClient,
                     jitClient: this.jitClient,
+                    mfaClient: this.mfaClient,
                     username: signInInputs.username,
                     codeLength: startResult.codeLength,
                     scopes: signInInputs.scopes ?? [],
@@ -20487,6 +20886,7 @@ class CustomAuthStandardController extends StandardController {
                         signInClient: this.signInClient,
                         cacheClient: this.cacheClient,
                         jitClient: this.jitClient,
+                        mfaClient: this.mfaClient,
                         username: signInInputs.username,
                         scopes: signInInputs.scopes ?? [],
                         claims: signInInputs.claims,
@@ -20527,6 +20927,21 @@ class CustomAuthStandardController extends StandardController {
                         claims: signInInputs.claims,
                     }));
                 }
+                else if (submitPasswordResult.type ===
+                    SIGN_IN_MFA_REQUIRED_RESULT_TYPE) {
+                    // MFA is required - create MfaAwaitingState
+                    this.logger.verbose("MFA required for sign-in.", correlationId);
+                    return new SignInResult(new MfaAwaitingState({
+                        correlationId: correlationId,
+                        continuationToken: submitPasswordResult.continuationToken,
+                        logger: this.logger,
+                        config: this.customAuthConfig,
+                        mfaClient: this.mfaClient,
+                        cacheClient: this.cacheClient,
+                        scopes: signInInputs.scopes ?? [],
+                        authMethods: submitPasswordResult.authMethods ?? [],
+                    }));
+                }
                 else {
                     // Unexpected result type
                     const result = submitPasswordResult;
@@ -20579,6 +20994,7 @@ class CustomAuthStandardController extends StandardController {
                     signUpClient: this.signUpClient,
                     cacheClient: this.cacheClient,
                     jitClient: this.jitClient,
+                    mfaClient: this.mfaClient,
                     username: signUpInputs.username,
                     codeLength: startResult.codeLength,
                     codeResendInterval: startResult.interval,
@@ -20596,6 +21012,7 @@ class CustomAuthStandardController extends StandardController {
                     signUpClient: this.signUpClient,
                     cacheClient: this.cacheClient,
                     jitClient: this.jitClient,
+                    mfaClient: this.mfaClient,
                     username: signUpInputs.username,
                 }));
             }
@@ -20635,6 +21052,7 @@ class CustomAuthStandardController extends StandardController {
                 resetPasswordClient: this.resetPasswordClient,
                 cacheClient: this.cacheClient,
                 jitClient: this.jitClient,
+                mfaClient: this.mfaClient,
                 username: resetPasswordInputs.username,
                 codeLength: startResult.codeLength,
             }));
@@ -21541,6 +21959,14 @@ exports.HttpError = HttpError;
 exports.InvalidArgumentError = InvalidArgumentError;
 exports.InvalidConfigurationError = InvalidConfigurationError;
 exports.MethodNotImplementedError = MethodNotImplementedError;
+exports.MfaAwaitingState = MfaAwaitingState;
+exports.MfaCompletedState = MfaCompletedState;
+exports.MfaFailedState = MfaFailedState;
+exports.MfaRequestChallengeError = MfaRequestChallengeError;
+exports.MfaRequestChallengeResult = MfaRequestChallengeResult;
+exports.MfaSubmitChallengeError = MfaSubmitChallengeError;
+exports.MfaSubmitChallengeResult = MfaSubmitChallengeResult;
+exports.MfaVerificationRequiredState = MfaVerificationRequiredState;
 exports.MsalCustomAuthError = MsalCustomAuthError;
 exports.NoCachedAccountFoundError = NoCachedAccountFoundError;
 exports.ParsedUrlError = ParsedUrlError;